What privacy pages does a UAE online store need?

No UAE law lists them by name, but in practice three: a privacy notice, because the UAE PDPL (Article 13) requires telling people the purposes of processing and who receives their data before processing starts; a cookie banner with settings for analytics and advertising tags; and a clear way to refuse marketing messages.

The PDPL has no express privacy-notice article, but it gives people a free right to ask what data you process, why, who receives it inside or outside the UAE, how long you keep it, how to have it corrected or erased, and how to complain to the UAE Data Office. A published notice answers those questions before anyone asks.

Two other federal laws touch the same pages. Federal Decree-Law No. 14 of 2023 on trading by modern technological means applies data protection law to consumer data, and lets consumers choose whether to receive marketing by phone, email or social media (Article 6). The UAE Government describes the Consumer Protection Law, Federal Law No. 15 of 2020, as protecting consumer data and prohibiting suppliers from using it for marketing.